author
Ahmed Barakat
author
Share
Solana News: The Seoul South District Prosecutor’s Office has arrested and charged five suspects in South Korea’s first-ever criminal case targeting a rug sweep carried out on a decentralized exchange.
The charges, under the Virtual Assets User Protection Law, which took effect in July 2024, cover market manipulation and fraud, with 256 investors losing a total of 900 million won ($600,000) after draining liquidity from the CATFI token pool.
The case marks the first time South Korean authorities have applied the law’s unfair trading provisions to a DEX-based scheme, explicitly positioning it as “the first legal prosecution for a cryptocurrency crime carried out through a DEX.”
The suspects were arrested on May 11, 2026; All five were formally charged by the Seoul South District Prosecutor’s Office on May 27, 2026.
The main suspect, identified by the surname Park, was operating online as the influencer “Eth Father,” a fake persona created to manufacture organic-looking community interest in CATFI.
Park and four colleagues launched the meme coin on a Solana-based decentralized exchange, quietly pre-loading wallets with a dominant token position before beginning a public promotion campaign.
Using circular trading and coordinated wash trades across multiple wallets, the group pumped CATFI’s price 1,001x within 26 hours, attracting retail buyers before withdrawing all liquidity.
Organizers pocketed nearly 400 million won ($260,000) in illegal profits, leaving 256 investors holding worthless positions.
Two suspects were arrested and charged with market manipulation. One was indicted but not arrested; Two others were accused of helping the main suspect evade authorities – one of whom allegedly spent three months in disguise to avoid arrest.
Discover: The best cryptocurrencies to diversify your investment portfolio
Solana News: South Korea’s CATFI arrested and DeFi regulated
DeFi exchanges have operated under a persistent regulatory blind spot across most jurisdictions, no centralized listing process, no mandatory issuer disclosure, and pseudonymous wallet structures that have historically thwarted implementation.
Before CATFI, South Korea’s Virtual Asset User Protection Act applied exclusively to cases of central exchange market abuse, including manipulation of Bithumb and the ACE token scheme. The CATFI trial is the first time these unfair trading conditions have been tested against the behavior of an on-chain DEX.
Prosecutors did not charge the group under unregistered exchange laws or the token list. Instead, they relied on the traditional fraud and market manipulation provisions within the FRA, arguing that circular trading, false influencer promotion, and intentional insider misrepresentation of token control constitute “fraudulent means, schemes, or techniques” in digital asset trading.
This legal theory is important: it means that prosecutors do not need a registered entity or central platform to bring charges – on-chain behavior is sufficient.
Prosecutors in the southern Seoul district have articulated their enforcement mandate, stating that the office will “firmly deal with actions that disrupt the digital asset market and undermine public trust.”
The CATFI issue does not exist in isolation. South Korea introduced five-minute settlement requirements and automatic kill switches for cryptocurrency platforms earlier in 2026, along with a new digital assets law that includes a 100% reserve requirement for stablecoins.
Authorities also indicated in January that they were reconsidering the country’s long-standing ban on spot Bitcoin ETFs.
Against the backdrop of $110 billion worth of cryptocurrency outflows through 2025, regulators have systematically closed the gap between DeFi activity and official oversight, and more broadly Regulatory frameworks for cryptocurrencies are evolving globallySouth Korea’s enforcement stance is increasingly setting the pace for DeFi cybercrime prosecutions.
Discover: The best advance token sales
How did you track them down?
Investigators built a CATFI case using wallet aggregation to map on-ramp token concentration, circular trading pattern analysis to determine trade coordination across linked addresses, and off-ramp KYC crossover, the point at which pseudonymous wallets turn into fiat on a central exchange with identity verification requirements.
Off-ramp exposure is the structural weak point of every DEX-based staking: operators can hide their identity on-chain, but converting the proceeds into fiat requires going through a regulated gateway.
Online sleuths initially identified suspicious wallets and filed complaints, but authorities temporarily closed the case after the group claimed they had been hacked.
The matter was later re-referred by the Financial Services Commission, triggering a renewed criminal investigation that called in the financial and tax authorities to complete the chain of evidence. Additional details on the investigation timeline Confirming that the FSC re-referral was the turning point that opened up the full forensic reconstruction process.
Analysts portray the case as signaling the end of direct executions as an enforcement blind spot, noting that authorities are now mapping on-chain behavior, social promotion, and market manipulation into traditional prosecution theories. Pseudonymous brands and multiple wallet setups don’t put the issue out of reach when combined with modern blockchain forensics and KYC tracking out of the way.
DeFi regulation in South Korea has now moved from exchange oversight to on-chain conduct, and Solana meme coin operators who assumed decentralization means impunity are reading that statement very carefully at the moment.
